Route Origin Authorization
$ rpki-client -vvvf rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
File: AS42831.roa (raw, json)
Hash identifier: 2V6rC1041weJeO4HwIF3/7lec7weoycGFqzmHfuDoAc=
Subject key identifier: C1:32:66:E5:92:FE:AE:9D:E1:B1:F5:A4:94:D5:3B:6C:E2:CE:CA:81
Certificate issuer: /CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Certificate serial: 1E9F8A0FA77619387E0EB069A545CEEC559DD223
Authority key identifier: 4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
Signing time: Tue 08 Sep 2026 00:06:05 +0000
ROA not before: Tue 08 Sep 2026 00:01:05 +0000
ROA not after: Tue 07 Sep 2027 00:06:05 +0000
asID: 42831
IP address blocks: 96.62.220.0/24 maxlen: 24
140.233.165.0/24 maxlen: 24
143.14.80.0/24 maxlen: 24
143.14.93.0/24 maxlen: 24
143.14.114.0/24 maxlen: 24
143.14.136.0/24 maxlen: 24
143.14.241.0/24 maxlen: 24
146.103.28.0/24 maxlen: 24
147.79.4.0/24 maxlen: 24
148.135.174.0/24 maxlen: 24
150.241.132.0/24 maxlen: 24
150.241.133.0/24 maxlen: 24
150.241.134.0/24 maxlen: 24
150.241.137.0/24 maxlen: 24
150.241.144.0/24 maxlen: 24
150.241.238.0/24 maxlen: 24
155.117.110.0/24 maxlen: 24
155.117.115.0/24 maxlen: 24
155.117.196.0/24 maxlen: 24
155.117.227.0/24 maxlen: 24
155.117.244.0/24 maxlen: 24
155.117.254.0/24 maxlen: 24
162.141.11.0/24 maxlen: 24
162.141.88.0/24 maxlen: 24
162.141.104.0/24 maxlen: 24
167.148.144.0/24 maxlen: 24
167.148.152.0/24 maxlen: 24
167.148.157.0/24 maxlen: 24
167.148.192.0/24 maxlen: 24
167.148.202.0/24 maxlen: 24
167.148.205.0/24 maxlen: 24
167.148.211.0/24 maxlen: 24
168.222.7.0/24 maxlen: 24
168.222.108.0/24 maxlen: 24
168.222.109.0/24 maxlen: 24
168.222.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.mft
rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:9f:8a:0f:a7:76:19:38:7e:0e:b0:69:a5:45:ce:ec:55:9d:d2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fc336bf9f3de5ce41414bd1971945f4b246bfcc
Validity
Not Before: Sep 8 00:01:05 2026 GMT
Not After : Sep 7 00:06:05 2027 GMT
Subject: CN=C13266E592FEAE9DE1B1F5A494D53B6CE2CECA81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:db:3d:14:0c:d2:0f:ac:6d:67:e8:e8:44:a5:
ab:19:0b:d5:5f:68:89:85:e2:41:22:c7:58:1b:a1:
1d:50:fc:67:34:db:db:16:59:1e:6e:f8:55:0c:4d:
87:9f:2f:80:84:db:82:88:67:0d:99:74:84:a0:7a:
48:73:69:b3:da:15:4d:f3:de:ff:f9:e9:ad:ff:20:
8b:5a:e7:ac:03:d5:28:17:ff:c2:a8:e3:30:31:97:
cf:c5:13:28:c6:5d:6d:a7:b0:69:15:64:d3:14:18:
ce:56:af:d4:ac:5b:d6:ee:97:2b:62:32:f4:1e:62:
ff:8c:ef:05:25:38:52:ae:49:a6:c6:2b:85:08:c7:
1d:80:a0:84:d8:35:c6:00:a6:e8:45:4d:92:0c:8d:
93:cf:96:0b:7e:60:62:09:82:c9:36:76:82:6b:dd:
2c:0a:48:30:38:b6:eb:fd:63:5e:b2:e1:d7:eb:bb:
42:86:b3:be:f1:14:37:44:df:3f:08:50:1c:b9:f8:
94:71:19:fc:0d:5e:26:7b:2c:3b:78:83:b1:60:7c:
b8:51:93:c6:00:43:9f:56:ac:dd:1b:ae:cb:fc:a3:
de:fb:e3:06:05:0c:c9:ba:45:5c:95:e3:59:b7:b2:
76:74:32:98:1e:f0:6b:1d:45:47:be:7f:01:d8:80:
62:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:66:E5:92:FE:AE:9D:E1:B1:F5:A4:94:D5:3B:6C:E2:CE:CA:81
X509v3 Authority Key Identifier:
keyid:4F:C3:36:BF:9F:3D:E5:CE:41:41:4B:D1:97:19:45:F4:B2:46:BF:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/4FC336BF9F3DE5CE41414BD1971945F4B246BFCC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T8M2v5895c5BQUvRlxlF9LJGv8w.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09be3aae-aea1-41dc-b1b9-95ac5918244d/0/AS42831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
96.62.220.0/24
140.233.165.0/24
143.14.80.0/24
143.14.93.0/24
143.14.114.0/24
143.14.136.0/24
143.14.241.0/24
146.103.28.0/24
147.79.4.0/24
148.135.174.0/24
150.241.132.0-150.241.134.255
150.241.137.0/24
150.241.144.0/24
150.241.238.0/24
155.117.110.0/24
155.117.115.0/24
155.117.196.0/24
155.117.227.0/24
155.117.244.0/24
155.117.254.0/24
162.141.11.0/24
162.141.88.0/24
162.141.104.0/24
167.148.144.0/24
167.148.152.0/24
167.148.157.0/24
167.148.192.0/24
167.148.202.0/24
167.148.205.0/24
167.148.211.0/24
168.222.7.0/24
168.222.108.0-168.222.110.255
Signature Algorithm: sha256WithRSAEncryption
13:23:d5:83:4f:13:8a:b6:8d:08:2a:2f:08:bc:3f:ee:6c:11:
90:33:79:7b:be:fb:bd:52:37:3d:e6:77:27:30:98:ee:ba:35:
9b:74:9b:2e:68:d3:f4:c5:43:8d:d5:5e:e9:22:72:85:ea:5a:
fa:8d:19:ed:92:5a:6c:b9:36:b7:f5:43:04:25:23:21:6c:3e:
d0:b2:5e:4e:60:03:ee:43:91:a0:5c:53:a9:c3:10:82:cb:38:
87:7f:ed:d3:03:ce:28:24:de:2f:3f:fc:33:47:4c:36:8d:3e:
d8:1c:b2:ea:a8:bc:40:64:fd:09:02:17:40:2d:d0:ff:32:aa:
e5:3b:b6:0d:dd:38:95:35:57:0c:87:e5:a9:cc:1c:2f:2c:87:
77:da:a7:8b:08:6b:48:0f:8c:92:52:d6:0c:39:e0:5c:9f:09:
c3:d0:ec:cc:6b:f2:d3:d4:9e:0b:05:7c:23:7f:e6:c5:30:f4:
b2:a5:54:20:b8:85:2c:c3:4e:de:65:ae:f9:29:80:a0:fa:99:
6b:04:4b:b1:00:3e:6a:46:56:e3:5a:ac:04:1c:35:76:e0:e0:
05:9a:7e:a8:4b:bd:6b:61:c0:65:06:20:6c:41:1a:5f:d0:d6:
71:0c:ec:3a:1a:de:c9:97:2b:1c:82:b0:ef:f7:22:6a:04:4b:
72:64:eb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:02:21 2026 by rpki-client